Refers to administrative security, personnel security, and physical security. (Compare: internal controls.)